Planning and Implementing Azure Firewall

What you'll be asked

1. Which Azure Firewall SKU is required to support IDPS (Intrusion Detection and Prevention System) and TLS inspection?
2. You need to ensure that your Azure Firewall logs traffic to a central location for analysis in a Log Analytics workspace. Which configuration is required?
3. An administrator wants to block all outbound traffic from a subnet except for traffic destined to specific fully qualified domain names (FQDNs). Which rule type should be used in an Azure Firewall Policy?
4. When deploying Azure Firewall in a Hub-and-Spoke topology, what is the mandatory step to ensure traffic from the Spoke VNet is filtered by the firewall?
5. You are troubleshooting why a specific traffic flow is being dropped by Azure Firewall, even though a network rule exists. The rule uses an IP Group as the destination. What is a potential cause for this behavior?

Answers and explanations come after you submit.